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Abstract 

In the propositional modal (and algebraic) treatment of two-variable first-order logic 
equality is modelled by a ‘diagonal’ constant, interpreted in square products of universal 
frames as the identity (also known as the ‘diagonal’) relation. Here we study the decision 
problem of products of two arbitrary modal logics equipped with such a diagonal. As 
the presence or absence of equality in two-variable first-order logic does not influence 
the complexity of its satisfiability problem, one might expect that adding a diagonal 
to product logics in general is similarly harmless. We show that this is far from being 
the case, and there can be quite a big jump in complexity, even from decidable to the 
highly undecidable. Our undecidable logics can also be viewed as new fragments of first- 
order logic where adding equality changes a decidable fragment to undecidable. We prove 
our results by a novel application of counter machine problems. While our formalism 
apparently cannot force reliable counter machine computations directly, the presence of a 
unique diagonal in the models makes it possible to encode both lossy and insertion-error 
computations, for the same sequence of instructions. We show that, given such a pair of 
faulty computations, it is then possible to reconstruct a reliable run from them. 


1 Introduction 

It is well-known that the first-order quantifier Vx can be considered as an ‘S5-box’: a propo¬ 
sitional modal D-operator interpreted over universal frames (that is, relational structures 
{W,R) where R = Wx W). The so-called ‘standard translation’, mapping modal formulas 
to first-order ones, establishes a validity preserving, bijective connection between the modal 
logic S5 and the one-variable fragment of classical hrst-order logic [l2]. The idea of gener¬ 
alising such a propositional approach to full first-order logic was suggested and thoroughly 
investigated both in modal setting [ani uni sn, and in algebraic logic [mill]. In particular, 
the bimodal logic S5 x S5 over two-dimensional (2D) squares of universal frames corresponds 
to the equality and substitution free fragment of two-variable first-order logic, via a trans¬ 
lation that maps propositional variables P to binary predicates P(x,y), the modal boxes Dq 
and □! to the first-order quantifiers Vx and Vy, and the Boolean connectives to themselves. 
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In this setting, equality between the two first-order variables can be modally ‘represented’ by 
extending the bimodal language with a constant 5, interpreted in square frames with universe 
W X VK as the diagonal set 

{(x, x) : X &W}. 

The resulting three-modal logic (algebraically, representable 2D cylindric algebras |T8]) is 
now closer to the full two-variable fragment (though P(y,x)-like transposition of variables 
is still not expressible in it). The generalisation of the modal treatment of full two-variable 
first-order logic to products of two arbitrary modal logics equipped with a diagonal constant 
(together with modal operators ‘simulating’ the substitution and transposition of first-order 
variables) was suggested in [361 I37j . The product construction as a general combination 
method on modal logics was introduced in [8], and has been extensively studied ever since 
(see mm for surveys and references). Two-dimensional product logics can not only be 
regarded as generalisations of the first-order quantifiers [23], but they are also connected to 
several other logical formalisms, such as the one-variable fragment of modal and temporal 
logics, modal and temporal description logics, and spatio-temporal logics. At first sight, the 
diagonal constant can only be meaningfully used in applications where the domains of the 
two component frames consist of objects of similar kinds, or at least overlap. However, as 
modal languages cannot distinguish between isomorphic frames, in fact any subset D of a 
Cartesian product x W^, can be considered as an interpretation of the diagonal constant, 
as long as it is both ^horizontally’ and ^vertically’ unique in the following sense: 

Vx GWh,Vy,y' €Wy {{x,y),{x,y') € D y = y'), (1) 

\/x,x'£ Wh,yy & Wv [{x,y), {x',y) & D x = x'). (2) 

So, say, in the one-variable constant-domain fragment of first-order temporal (or modal) logics, 
the diagonal constant can be added in order to single out a set of special ‘time-stamped’ 
objects of the domain, provided no special object is chosen twice and at every moment of 
time (or world along the modal accessibility relation) at most one special object is chosen. 

In this paper we study the decision problem of 6-product logics: arbitrary 2D product logics 
equipped with a diagonal. It is well-known that the presence or absence of equality in the 
two-variable fragment of first-order logic does not influence the coNExpTiME-completeness 
of its validity problem [HI EEl [H] • So one might expect that adding a diagonal to product 
logics in general is similarly harmless. The more so that decidable product logics like K x K 
(the bimodal logic of all product frames) remain decidable when one adds modal operators 
‘simulating’ the substitution and transposition of first-order variables [38] . However, we show 
that adding the diagonal is more dangerous, and there can be quite a big jump in complexity. 
In some cases, the global consequence relation of product logics can be reduced the validity- 
problem of the corresponding d-products (Prop. [2|). We also show (Theorems O [4|) that if 
L is any logic having an infinite rooted frame where each point can be accessed by at most 
one step from the root, then both K x^ L and K4.3 L are undecidable (here K is the 
unimodal logic of all frames, and K4.3 is the unimodal logic of linear orders). Some notable 
consequences of these results are: 

(i) K x'^ S5 is undecidable, (while K x S5 is coNExpTiME-complete [Hji and even the 
global consequence relation of K x S5 is decidable in co2NExpTime [43[[33|)- 

(ii) K4.3 x*^ S5 is undecidable (while K4.3 x S5 is decidable in 2ExpTime m)- 
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(iii) K K is undecidable (while K x K is decidable [8], though not in ElementaryTime 

[13]). 

See also Table [1] for some known results on product logics, and how our present results on 
(5-products compare with them. 

While all the above (5-product logics are recursively enumerable (Theorem [1]), we also show 
that in some cases decidable product logics can turn highly undecidable by adding a diagonal. 
For instance, both K x"^ S5 and K x*^ K when restricted to finite (but unbounded) product 
frames result in non-recursively enumerable logics (Theorem [3]). Also, Logic_of(a;, <) x*^ S5 
is n}-hard (Theorem [5]) . On the other hand, the unbounded width of the second-component 
frames seems to be essential in obtaining these results. Adding a diagonal to decidable product 
logics of the form K x Alt(n), S5 x Alt(n), and Alt(m) x Alt(n) result in decidable logics, 
sometimes even with the same upper bounds that are known for the products (Theorems [6] 
and [7D (here Alt (n) is the unimodal logic of frames where each point has at most n successors 
for some 0 < n < co). 

Our undecidable 5-product logics can also be viewed as new fragments of first-order logic 
where adding equality changes a decidable fragment to undecidable. (A well-known such 
fragment is the Godel class mw In particular, consider the following ‘2D extension’ 
of the standard translation |9], from bimodal formulas to three-variable first-order formulas 
having two free variables x and y and a built-in binary predicate R: 

:= P{x,y), for propositional variables P, 

(-■(/>):= and ((/> A V’)^ := (/’^A'i/;^, 

(□o(/))t ;= \fz {R{x,z) -i- (j)^z/x,y)), 

(□i<(')t := yz{R{y,z) (j)^x,z/y)). 

It is straightforward to see that, for any bimodal formula (j), 4> is satisfiable in the (decidable) 
modal product logic K x K iff (/)i is satisfiable in first-order logic. So the image of i is a 
decidable fragment of first-order logic that becomes undecidable when equality is added. 

Our results show that in many cases the presence of a single proposition (the diagonal) 
with the ‘horizontal’ and ‘vertical’ uniqueness properties ([IJ-dl]) is enough to cause undecid¬ 
ability of 2D product logics. If each of the component logics has a difference operator, then 
their product can express ‘horizontal’ and ‘vertical’ uniqueness of any proposition. For ex¬ 
ample, this is the case when each component is either the unimodal logic Diff of all frames of 
the form (W, y^), or a logic determined by strict linear orders such as K4.3 or Logic_of(a;, <). 
So our Theorems 0] and [S] can be regarded as generalisations of the undecidability results of 
[32] on ‘linear’x‘linear’-type products, and those of m on ‘linear’ xDiff -type products. 

On the proof methods. Even if 2D product structures are always grid-like by definition, 
there are two issues one needs to deal with in order to encode grid-based complex problems 
into them: 

(i) to generate infinity, even when some component structure is not transitive, and 

(ii) somehow to ‘access’ or ‘refer to’ neighbouring-grid points, even when there is no ‘next¬ 
time’ operator in the language, and/or the component structures are transitive or even 
universal. 
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validity of 

product logic 

global 

consequence of 
product logic 

validity of 
(5-product logic 

S5 X S5 

CONExpTiME-complete 

[SlIllIIlIH] 

same 

as validity 

coNExpTime- 

complete 

[3i[2i[ii] 

K X S5 

CONExpTiME-complete 

m 

decidable in 

co2NExpTime 

[131133] 

undecidable 

Cor. [2] 

K X K 

decidable [S] 

not in ElementaryTime 

m 

undecidable [21] 

undecidable 

Cor. [T] 

K4.3 X S5 

decidable 
in 2 ExpTime [31] 
CONExpTiME-hard [21] 

same 

as validity 

undecidable 

Cor. [3] 

K4 X S5 

decidable 

in CON2ExpTime [8] 
CONExpTiME-hard [21] 

same 

as validity 

0 

K4 X K 

decidable [l3] 

not in ElementaryTime 

m 

undecidable [15] 

undecidable 

Cor. [1] 

K4 X K4 

undecidable [TU] 

same 

as validity 

undecidable 
Prop. [T] 

KxAlt(n) 

decidable 

in CONExpTime (n > 1) 
in ExpTime (n = 1) [7] 

undecidable 

decidable 

in coNExpTime 

Thm. [6] 


Table 1: Product vs. (5-product logics. 
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When both component structures are transitive, then (i) is not a problem. If in addition 
component structures of arbitrarily large depths are available, then (ii) is usually solved by 
‘diagonally’ encoding the oj x w-grid, and then use reductions of tiling or Turing machine 
problems 12511321 no]. When both components can express the uniqueness of any proposition 
(like strict linear orders or the difference operator), then it is also possible to make direct 
use of the grid-like nature of product structures and obtain undecidability by forcing reliable 
counter machine computations However, ^-product logics of the form L x'^SS apparently 
neither can force such computations directly, nor they can diagonally encode the ui x cj-grid. 
Instead, we prove our lower bound results by a novel application of counter machine problems. 
The presence of a unique diagonal in the models makes it possible to encode both lossy and 
insertion-error computations, for the same sequence of instructions. We then show (Prop.[3|) 
that, given such a pair of faulty computations, one can actually reconstruct a reliable run 
from them. The upper bound results are shown by a straightforward selective filtration. 

The structure of the paper is as follows. Section [2] provides all the necessary definitions. 
In Section [3] we establish connections between our logics and other formalisms, and discuss 
some consequences of these connections on the decision problem of (5-products. In Section [3] 
we introduce counter machines, and discuss how reliable counter machine computations can 
be approximated by faulty (lossy and insertion-error) ones. Then in Sections [5] and [6] we 
state and prove our undecidability results on (5-products having a K or a ‘linear’ component, 
respectively. The decidability results are proved in Section (Tj Finally, in Section [8] we discuss 
some related open problems. 

2 (^-product logics 

In what follows we assume that the reader is familiar with the basic notions in modal logic 
and its possible world semantics (see [3 [5] for reference). Below we summarise the necessary 
notions and notation for our 3-modal case only, but we will use them throughout for the uni- 
and bimodal cases as well. We define our formulas by the following grammar: 

^ := P \ 6 \ ^(j) \ 4> Aijj \ I n^cj), 

where P ranges over an infinite set of propositional variables. We use the usual abbreviations 
V, —>■, ■H', T := P A -iP, Oi := and also 

Otc)>:= fyOicf, </> A □*</>, 

for i = h,v. (The subscripts are indicative of the 2D intuition: h for ‘horizontal’ and v for 
‘vertical’.) 

A 5-frame is a tuple ^ = (IT, R^, Ry, D) where Ri are binary relations on the non-empty 
set IT, and D is a subset of IT. We call 5^ rooted if there is some w such that wR*v for all 
u € IT, for the reflexive and transitive closure R* oi R '.= Rh^ Ry A model based on ^ is a 
pair 911 = u), where u is a function mapping propositional variables to subsets of IT. The 

truth relation 9JI, rc |= (/> is defined, for all w G IT, by induction on cj) as usual. In particular, 

971, w \= 6 iff w ^ D. 

We say that 4> is satisfied in 971, if there is tc G IT with 971, w \= (f. We write 971 [=(/), if 
971, w \= (f) ioi every w G IT. Given a set L of formulas, we write 971 [= L if 971 |= (/> for every 
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(j) in L. Given formulas (p and V', we write (p \=*j^ V' iff |= V’ for every model 9Jt such that 
m \=Lu{p}. 

We say that p is valid in if Tl \= p for every model fOl based on If every formula in 
a set L is valid in 5^, then we say that is a frame for L. We let FrL denote the class of all 
frames for L. For any class C of (5-frames, we let 

Logic_of C := {p : p is a formula valid in every member of C}. 

We call a set L of formulas a Kripke complete logic if L = Logic_ofC for some class C. A 
Kripke complete logic L such that for all formulas p and p, p |=^ p iS^\= p implies |= V’ 
for every model Tl based on a frame for L, is called globally Kripke complete. 

We are interested in some special ‘two-dimensional’ (5-frames. Given unimodal Kripke 
frames '^h = (W/i, Rh) and = (IW, their product is the bimodal frame 

X := {Wh X IW, Rh, Rv), 

where Wh x is the Cartesian product of sets Wh and W^ and the binary relations Rh and 
Ry are defined by taking, for all x, x' G Wh, y, y' G Wy, 

{x, y)Rh{x', y') iff xRhx' and y = y', 

{x,y)R.u{x',y') iff yRvV' and x = x'. 

The 5-product of ^h and 5^^ is the (5-frame 

dh dv ■= {Wh X Wy,Rh,Rv, ''d), 

where (Wh x Wy, Rh, Rv) =^hX^v and 

id = {{x, x) : x € Wh n Wy}. 

For classes Ch and Cy of unimodal frames, we define 

Ch Cy = dv -di ^ Ci, for i = h, u}. 

Now, for i = h,v, let Li be a Kripke complete unimodal logic in the language with Oj. The 
5-product of Lh and Ly is defined as 

Lh x^ Ly := Logic_of (FrL/j FrA^,). 

As a generalisation of the modal approximation of two-variable first-order logic, it might be 
more ‘faithful’ to consider 

Lh xfg Ly := {p : p is valid in ^h x^ ^y, for some rooted ^i = {Wi, Rp 

in FrLj, i = h,v, such that Wh = Wy}, 


or, in case Lh = Ly = L, even 

L x^gqjL := {p : p is valid in ^ 5, for some rooted ^ G FrL}. 

Then S5 xf^ S5 = S5 x^^jSS indeed corresponds to the transposition-free fragment of two- 
variable first-order logic. However, S5 x'^ S5 is properly contained in S5 xf^ S5: for instance 
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OhS belongs to the latter but not to the former. In general, clearly we always have Ly C 
Lfi XggLy and Lx^^L C L x^gqfL, whenever = Ly = L. Also, it is not hard to give examples 
when the three definitions result in three different logics. Throughout, we formulate all our 
results for the Lh x^ Ly cases only, but each and every of them holds for the corresponding 
L/j x^g^Ly as well (and also for L when it is meaningful to consider the same L as both 

components). 

Given a set L of formulas, we are interested in the following decision problems: 

L-VALIDITY: Given a formula (j), does it belong to L? 

If this problem is (un)decidable, we simply say that ‘L is (un)decidable’. L-validity is the 
‘dual’ of 

L-satisfiability: Given a formula (/>, is there a model SOI such that SOI |= L and (f> is satisfied 
in 971? 

Glearly, if L = Logic_of C then L-satisfiability is the same as 

C-SATISFIABILITY: Given a formula (^, is there a frame 5^ € C such that (f) is satisfied in a 
model based on S’? 

We also consider 

Global L-CONSEQUENCE: Given formulas (j) and i/’, does (j) |=^ iIj hold? 

Notation. Our notation is mostly standard. In particular, we denote by the reflexive 
closure of a binary relation R. The cardinality of a set X is denoted by |A|. For each natural 
number k < uj, we also consider k as the finite ordinal k = {0,... ,k — 1}. 

3 Decidability of ^-products: what to expect? 

To begin with, the following proposition is straightforward from the definitions: 

Proposition 1. Lh x^ Ly is always a conservative extension of Lh x Ly. 

So it follows from the undecidability results of [lOj on the corresponding product logics 
that Lh x^ Ly is undecidable, whenever both Lh and Ly have only transitive frames and have 
frames of arbitrarily large depths. For example, K4 x'^ K4 is undecidable, where K4 is the 
unimodal logic of all transitive frames. 

Next, we establish connections between the global consequence relation of some product 
logics and the corresponding d-products. To begin with, we introduce an operation on frames 
that we call disjoint union with a spy-point. Given unimodal frames = {Wi,Ri), i ^ I, for 
some index set /, and a fresh point r, we let 

r 

\J^i:= {W,R), 

iei 

where 


W = {r} U {{wfl) : i ^ I, w ^ IF*}, and 

i? = {(r, (wfl)) : w G Wi, i G /} U {w'fl)) : w,w' & Wi, wRiw', i G /}. 

Note that the spy-point technique is well-known in hybrid logic [1]. 
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Proposition 2. If Lh and are Kripke complete logics such that both frLh and FrL^ are 
closed under the ‘disjoint union with a spy-point’ operation and x is globally Kripke 
complete, then the global x L„-consequence is reducible to Ly-validity. 

Proof. We show that for all bimodal ((5-free) formulas cf, tp, 

V' iff {(un\y^ e LhX^ 

where 

univ'^ := A Uf,ny,0.,j5 A A 

Suppose that {rh,r„) ^ univ'^ A A OhI>v~''4’ in a model that is based on 

'Sv, for some frames = {Wi,Ri) in FrLj, i = h,v. Then there exist Xh, Xy such that 
rhRhXh, ryRyXy and {xh,Xy) \= -iip. For i = h,v, let ©j be the subframe of generated 
by point Xi, and let Tt be the restriction of Tl to &h x &y. Then 

^\=LhxLy and % {xh, Xy) \= (3) 

We claim that 

riRiW, for all w in ©j and i = h,v. (4) 

Indeed, let i = h. We prove (jH) by induction on the smallest number n of Rh-steps needed 
to access w from Xh- If n = 0 then we have rhRhXh- Now suppose inductively that ([!]) holds 
for all w in ©/j that are accessible in < n Rh-steps from Xh for some n < uj, and let w' be 
accessible in n + 1 Rh-steps. Then there is w in (5h that is accessible in n steps and wRhw'. 
Thus r^RhW by the IH, and so {w',ry) ^ <>y5 by univ^. Therefore, we have w' E Wy and 
ryRyw'. Then {rh,w') \= Oh6 again by univ'^, and so rhRhw' as required. The i = v case 
is similar. 

Now it follows from 9JI, {rh,ry) \= Uj^^nyp and (|4]) that ‘^\= <j). Therefore, (f 

©. 

<^=: Suppose that dJt \= <f> and Tl,w \= in some model 911 with Tl \= Lh x Ly. As 
Lh X Ly is globally Kripke complete, we may assume that 9Jt = {^h x ^y,p,) for some frames 
di = {Wi,Ri) in FrLj, i = i,h. Let a < \Wy\, be iMAl-many copies of ^hi and '^y, 
/3 < \Wh\, be iFF/il-many copies of Take some fresh point r and define 

r r 

&h = {Uh,Sh):= U n and &y = {Uy, Sy) := |J di 
a<|Wd P<\Wh\ 

Then by our assumption, ©j is a frame for Li, for i = h,v. Define a model 91 := (©/j ©„, u) 

by taking, for all propositional variables P, 

z/(P) := {((x,a), {y,/3)) : {x,y) E m(P)}- 

Then 91, (r, r) \= HhOyCp A OhOy-^ip. As \Uh\ = \Uy\ and FrLj is closed under isomorphic 
copies for i = h,v, we can actually assume that Uh = Uy, and so 91, (r, r) \= univ*^. □ 

Corollary 1. K K and K x*^ K4 are both undecidable. 
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Proof. It is not hard to check that the 2D product logics K x K and K x K4 satisfy the 
requirements in Prop. [2] (cf. [TJ Thm.5.12] for global Kripke completeness). A reduction of, 
say, the u x w-tiling problem [2] shows that global K x K-consequence is undecidable |24j . 
and so the undecidability of K x-^ K follows by Prop. [21 It is shown in [15] that the reduction 
of K4 to global K-consequence [4Uj can be ‘lifted’ to the product level, and so K4 x K4 is 
reducible to global K x K4-consequence. Therefore, the latter is undecidable [TO], and so the 
undecidability of K x*^ K4 follows by Prop. EJ □ 

Note that we can also make Prop. El work for logics having only reflexive frames by making 
the ‘spy-point’ reflexive, and using a slightly different ‘translation’: 

</> V’ iff 

((univ-^ A □,,P A D^P A nhn^hP ^ ())) ^ □h□^,(-P ^ V’)) e U x^ L^, 
where P is a fresh propositional variable. 

However, logics having only symmetric frames (like S5), or having only frames with 
bounded width (like K4.3 or Alt(n)) are not closed under the ‘disjoint union with a spy- 
point’ operation, and so Prop.Eldoes not apply to their products. It turns out that in some of 
these cases such a reduction is either not useful in establishing undecidability of d-products, 
or does not even exist. While global K x S5-consequence is reducible to PDL x S5-vahdit30, 
and so decidable in co2NExpTime [l3| [33], K x^ S5 is shown to be undecidable in The¬ 
orem El below. While K x Alt (n) is decidable by Theorem [6] below, the undecidability of 
global K X Alt(n)-consequence can again be shown by a straightforward reduction of the 
u! X ca-tiling problem. 

Finally, the following general result is a straightforward generalisation of the similar the¬ 
orem of [8] on product logics. It is an easy consequence of the recursive enumerability of the 
consequence relation of (many-sorted) first-order logic: 

Theorem 1. If and are Kripke complete logies sueh that both frLf^ and FrL^ are 
recursively first-order definable in the language having a binary predicate symbol, then L,, 
is recursively enumerable. 

4 Reliable counter machines and faulty approximations 

A Minsky m or counter machine M is described by a finite set Q of states, an initial state 
gini € Q, a set if C Q of terminal states, a hnite set C = {cq, ..., cat-i} of counters with 
A > I, a finite nonempty set Iq C OpQ x Q of instructions, for each q G Q — H, where each 
operation in Op(j is one of the following forms, for some i < N: 

• cf~^ {inerement eounter ci by one), 

• c\ {deerement eounter Ci by one), 

• cj’ {test whether eounter Ci is empty). 

^Here PDL denotes Propositional Dynamic Logic. 
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For each a € O'Pq^ we will consider three different kinds of semantics: reliable (as described 
above), lossy [2^ (when counters can spontaneously decrease, both before and after perform¬ 
ing a), and insertion-error [29] (when counters can spontaneously increase, both before and 
after performing a). 

A configuration of M is a tuple {q, c) with q £ Q representing the current state, and 
an A'-tuple c = (cq, ..., cn-i) of natural numbers representing the current contents of the 
counters. Given a € OpQ, we say that there is a reliable a-step between configurations {q,c) 
and {q',c') (written {q-,c) ^°‘{q',c')) iff {a,q') G Iq and 

• if a = cd+ then c' = q -|- 1 and c'- = Cj for j i, j < N] 

• if a = c) then c' = c* — 1 and c' = Cj for j i, j < N] 

• if a = cJ’ then c( = Cj = 0 and c'- = Cj for j < N. 

We say that there is a lossy a-step between configurations (g, c) and {q', c') (and we write 
c) -^f^,,y{q', c')) iff (a, q') £ Iq and 

• if a = cf~^ then c' < c* + 1 and c' < Cj for j i, j < N] 

• if a = c) then c' < c* — 1 and c' < Cj for j i, j < N] 

• if a = then c( = 0 and c' < cj for j < N. 

Finally, we say that there is an insertion-error a-step between configurations {q, c) and {q', c') 
(written (g, c) -^ZerrW^^')) ^ Iq and 

• if a = cl~^ then c( > c* -|- 1 and c'- > Cj for j i, j < N; 

• if a = c- then c' > Cj — 1 and c'- > Cj for j i, j < N] 

• if a = cJ’ then c* = 0 and c' > cj for j < N. 

Now suppose that a sequence r = {{an,qn) : 0 < n < S) of instructions of M is given for 
some 0 < B < uj. We say that a sequence g = {{qn,c{n)) : n < i?) of configurations is a 
reliable f-run of M if 

(i) Qo = q\n\, c(0) = 0, and 

(ii) {qn-i,c{n — 1)) c(n)) holds for every 0 < n < B. 

A reliable run is a reliable r-run for some r. Similarly, a sequence g satisfying (i) is called 
a lossy T-run if we have {qn-i,c{n — 1)) c(n)), and an insertion-error r-run if we 

have {qn-i, c{n — 1)) c(n)), for every 0 < n < B. (Note that in order to simplify the 

presentation, in each case we only consider runs that start at state (?ini with all-zero counters.) 

Observe that, for any given r, if there exists a reliable r-run, then it is unique. The follow¬ 
ing statement says that this unique reliable r-run can be ‘approximated’ by a (lossy, insertion- 
error)-pair of r-runs: 

Proposition 3. (faulty approximation) 

Given any sequence r of instructions, there exists a reliable r-run iff there exist both lossy 
and insertion-error r-runs. 
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Proof. The ^ direction is obvious, as each reliable r-run is both a lossy and an insertion-error 
r-run as well. For the direction, suppose that r = ((a„, qn) : 0 < n < i?) for some B < lo, 
(^{qn,c°{n)) : n < i?) is a lossy r-run, and (^{qn,c*{n)) : re < i?) is an insertion-error r-run. 
We claim that there is a sequence (c(re) : re < i3) of Wtuples of natural numbers such that, 
for every n < B, 

(a) c°(re) < Ci(re) < c*(re) for every i < N, 

(b) if re > 0 then (g„_i,c(re - 1)) c(re)). 

It would follow that {{qn, c{n)) : re < S) is a reliable r-run as required. 

We prove the claim by induction on re. To begin with, we let c(0) := 0. Now suppose that 
(a) and (b) hold for all A: < re for some re with 0 < n < B. For each i < N, we let 

{ Ci{n-1) + 1, ifa„ = c++, 

Ci(re-1)-1, ifQ;n = c,““, 

Ci{n - 1), if an = 4' G {c++, c““, cj-} for j / i. 

We need to check that (a) and (b) hold for re. There are several cases, depending on 
On. If On = cj- then, by {qn-i,c°{n - 1)) ^Z"ssyi‘ln,c°{n)), the IH(a), and (gn-i,c*(re - 
1)) -^ZlrMn,c*{n)), we have 

Cj(n) < c°(re — 1) < Cj(n — 1) = Cj{n) < c*(re — 1) < c*(re) for all j i. 

Also, c*(re-l) = 0 by (g'n-i,c’(re- 1)) -^Zlrr{in,c*{n)). So by the IH(a), we have Cj(re-l) = 
0, and so Ci(re) = 0 and (gn-i, c(re - 1)) -^°‘^{qn,c{n)). As (g'n-i, c °(re - 1)) -^Zossy(^'ri,c°{n)), 
we have c°(re) = 0. Thus c°(re) = Ci(n) = c*(re — 1) = 0 < c*{n), as required. The other cases 
are straightforward and left to the reader. □ 

In each of our lower bound proofs we will use ‘faulty approximation’, together with one 
of the following problems on reliable counter machine runs; 

CM non-termination: (Ilj’-hard [27]) 

Given a counter machine A4, does Ai have an infinite reliable run? 

CM REACHABILITY: (E^-hard [27] 1 

Given a counter machine Ai, and a state gfin, does Ai have a reliable run reaching gfjn? 

CM recurrence: (E}-hard [I]) 

Given a counter machine Ai and a state qr, does Ai have a reliable run that visits qr infinitely 
often? 

5 Undecidable ^-products with a K-component 

For each 0 < k < ui, we call any frame {k, R) a k-fan if 

{(0,re) : 0 < n < k} C R. (5) 

Theorem 2. Let L be any Kripke eomplete logic having an ui-fan among its frames. Then 
K L is undecidable. 
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Corollary 2. K S5 is undecidable. 

We prove Theorem[2]by reducing the ‘CM non-termination’ problem to L/j x'^L^-satisfiability. 
Let be a model based on the (i-product of some frame = (Wh^Rh) in FrL/j and some 

frame = (Wv^Rv) in FrL„. First, we generate an a; x w-grid in Let grid be the 
conjunction of the formulas 


( 6 ) 

(7) 


Claim 2.1. (grid generation) 

//SOI, {rh,ry) ^ grid then there exist points {xn G Wh H Wy : n < uj) such that, for all n < uj, 

(i) rhRhXn, 

(ii) xo = ry, and if n > 0 then xoRyXn, 

(hi) if n > 0 then Xn-iRhXn, 

(iv) if n > 0 then Xn is the only Rh-successor of Xn-i- 
(We do not claim that all the Xn are distinct.) 

Proof By induction on n. Let xq := ry. Then (i) holds by ([ 6 ]). Now suppose inductively 
that we have {xk : k < n) satisfying (i)-(iv) for some 0 < n < cj. Then by ([7]), there is 
Xn G Wy such that xoRyXn and 501, {xn-i,Xn) ^ A D/jiJ. Therefore, Xn G Wh, Xn-iRhXn, 
and Xn is the only Rh-successor of x^-i. By ([6]), Tl, {rh,Xn) ^ So rhRhXn follows, as 

required. □ 

Observe that because of Claim iTTl iii) and (iv), D/j in fact expresses ‘horizontal next-time’ 
in our grid. For any formula and any w G Wy, 

901, {xn,w) \= □/iV’ iff 301) {xn+i,w) \= fj, for all n < uj. (8) 

Using this, we will force a pair of infinite lossy and insertion-error r-runs, for the same 
sequence r of instructions. Given any counter machine M, for each i < N ol its counters, 
we take two fresh propositional variables C° and C*. At each moment n of time, the actual 
content of counter Cj during the lossy run will be represented by the set of points 

S°(n) := {tc G Wy : xoRyW and 901, {xn,w) \= C°}, 

and during the insertion-error run by the set of points 

S*(n) ;= {tc G Wy : xoRyW and 901, {xn,w) ^ C*}. 

For each i < N, the following formulas force the possible changes in the counters during the 
lossy and insertion-error runs, respectively: 

fix°:= □+(n;,C° ^ C°), 

inc°:= □+(n;,C°^(C°V<5)), 

dec° := □+(□,, C° ^ C°) A ^+(C° A D/^-Q), 
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and 


fixV= □+(C’^ 

inc’ := □+(€• ^ Of^C:) A ^+(-C* A □/.C’), 
dec’:= □+(C*^ (□;,€• V 5)). 


Claim 2.2. (lossy and insertion-error counting) 

Suppose that (r/j, r^) |= grid. Then for all n < uj and i < N: 

(i) IfVJl,{xn,Xo)\={\x° i/ien S°(n + 1) C S°(n). 

(ii) //5Ji, (x„,xo) ^ inc° i/ien S°(n + 1) C S°(n) U {x^}. 

(iii) If Tl, {xn,xo) ^ dec° then T,°{n + 1)C S°(n) — {z} for some z G T,°{n). 

(iv) //5Ji, (x„,xo) ^ fix* then Il*{n + 1) D Tl*{n). 

(v) If Tl, {xn, xq) ^ inc* then there is z such that xoRfz, z ^ 5]*(n), and T,*{n + 1) D 
S*(n)U{4. 

(vi) IfM, {xn,xo) \= dec* then S*(n + 1) 2 “ {xn}- 

Proof. We show items (ii) and(v). The proofs of the other items are similar and left to the 

reader. 

(ii): Suppose w G S°(n + 1). Then x^Rffw and 9JT, (xn+i, rc) \= C°. By ([8]), we have 
Tl,{xn,w) \= D/iC®. Therefore, Tl,{xn,u}) ^ C° V 5 by inc°, and so either w G T°(n) or 
w = Xn- 

(v): By inc*, there is z with xoRf z and 971, {xn, z) ^ -iC* A tH/jC*. Thus z ^ 5]*(n). Also, 
we have 971, {xn+i,z) ^ C* by ([8]), and so z G S*(n + 1). Now suppose w G T*(n). Then 
x^Rffw and 971, {xn,w) ^ C*. By inc*, we have 971, {xn,w) ^ Thus 971, {xn+i,w) ^ C* 

by dS]), and so re G S*(n + 1). □ 


Using the above counting machinery, we can encode lossy and insertion-error steps. For 
each a G Op^, we dehne 


and 


inc° A /\ fix°. 

if a = 

i^j<N 


dec° A /\ fix°, 

if a = cl 

i^j<N 


□+n,,-qA /\ fix°, 

if a = cj^, 

i^j<N 


inc* A /\ fix*, 

if a = cf~^, 

i^j<N 


dec* A /\ fix*. 

if a = c~~, 

i^j<N 


□+-C*A /\ fix*, 

• r 

11 a = q •. 

i^j<N 
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Now we can force runs of M that start at q\n\ with all-zero counters. For each state q £ Q, 
we introduce a fresh propositional variable Sq, and define 


Sq :=Sq A /\ -iSg/. (9) 

q^q'eQ 

Let (fM be the conjunction of 


□h 


An+(-C°A-C*))), 


(10) 


A (^9 

—7- \J (D/iSg/A do°(a) 

> 

Q_ 

0 

• 

(11) 


qeQ—H 

{a,q')elq 




V s,. 



(12) 


q&Q—H 


Lemma 2.3. (lossy and insertion-error run-emnlation) 

Suppose that {vh^r^) \= grid A ipM- Let qo := q\„\, and for all i < N, n < uj, let c°{n) := 
|S°(n)| and 


j c*(n-l)-|-l, if T.*{n) is infinite, 

* I |S*(n)|, otherwise. 

Then there exists an infinite sequence f = {{an,qn) : 0 < n < w) of instructions such that 

• {{Qn,c°{n)) : n < w) is a lossy r-run of M, and 

• ((.n, c*(n)) : n < u') is an insertion-error r-run of M. 

Proof. We define {{an, qn) : 0 < n < w) by induction on n such that for all 0 < n < w, 

• qn £Q - H and Tl, {xn,xo) \= Sg„, 


• {qn-i,c°{n-l))^‘lfl^y{qn,c°{n)) and c’(n - 1 ))c’(n)). 

As c°(0) = c*(0) = 0 by (flOl) . the lemma will follow. 

To this end, take some n with 0 < n < a;. Then we have qn-i £ Q—H and HR, {xn-i,xo) \= 
Sg„_i, by (fT0|) and (fT^ if n = 1, and by the IH if n > 1. Therefore, by Claim I2.1f il and 
m, there is {an,qn) G Iqn-i such that HR, (xn-i,xo) \= A do°(Q;„) A do*(an)- So 

HR, (x„,xo) 1= Sq^ by Claim iTlT iiii. and so qn £ Q — H hy Claim [2TT ii and (fT^ . Using 
Claim iT^ il-fiiil . it is easy to check that (g„_i,c°(n — 1)) -Aff-^^y{qn,c°{n)). Finally, in order 
to show that {qn-i,c*{n — 1)) ^ffi,j.fiqn,c*{n)), we need to use Claim [221 iv)-(vi) and the 
following observation. As for each i < N either S*(n — 1) is inhnite or c*{n— 1) = |S*(n — 1 )|, 
if c*(n — 1) 7 ^ 0 then S*(n — 1) 7 ^ 0, and so an cj^ follows by HR, (xn-i,xo) |= do*(Q;ri,)- □ 


For each k < uj, let Sjk be the frame obtained from {k,+l) by adding a ‘spy-point’, that 
is, let Sjk ■= {k + 1 , Sk), where 


Sk = {{k,n) : n < k} U {{n — 1 , n) : 0 < n < k}. 


(13) 


Lemma 2.4. (soundness) 

If M has an infinite reliable run, then grid A ipM is satisfiable in a model over for 

some uj-fan 
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Proof. Suppose that (^{qn,c{n)) : re < w) is a reliable r-run of M, for some sequence r = 
{{an, Qn) : 0 < re < cj) of instructions. We define a model VJloo = 5^, A^) as follows. For 

each (7 G Q, we let 

fi{Sg) := {(re,0) :n<u, qn = q}- 

Further, for alH < re < w, we will define inductively the sets /in(C°) and and then 

put 

/i(C°) := {(re, 7 re) : m G Atn(C°)} and /i(C*) := {{n,m) : m G fj.n{C')}. 

To begin with, we let fio{C°) = fio{C*) := 0, and 


/^n+l(Cj ) 


^^n{C°) U {re}, 

/in(C°) - {min//n(C°)}, 

Pni^i ), 


if an+1 = C++, 
if CXn+l — Cj , 
otherwise. 


It is straightforward to check that 


|/i„(C°)| = Ci(re) and fUtoo, (re, 0) \= do°(Q:n+i), for all z < iV, re < uj. 


(14) 


We need to be a bit more careful when defining fini^*)- As the formulas do*(Q:„) permit 
decrementing the insertion-error counters only at diagonal points, we must be sure that only 
previously incremented points get decremented. To this end, for every i < N, we let 

Ai:= {k <uj : a^+i = c~~}, Hj := (A: < w : Uk+i = C++}, (15) 

and let 

{\\n '■ m < Li) be the enumeration of Aj in ascending order, and (16) 

{Cm '■ fn < Ki) he the enumeration of Hj in ascending order, (17) 


for some Li, Ki < uj. As in a run only non-zero counters can be decremented and our run is 
reliable, we always have Li < Ki, and \\n > Cm m < Li. Then we let 


An+l{L.i ) 


A^n(C*) U {A(„}, 

if an+1 = C++, 

. n = Cm, 
m < Li, 

Hn{<^i) U {min(a; - UniQ))}, 

if an+1 = C++, 

~ n = Cm, 


L. 

<m< Ki, 

l^n{Ci) - {re}, 

if an +1 — Cj , 


l^n{L-i ), 

otherwise. 



We claim that if Un+i = c^ then re G /in(C*), and so |/Zn-i-i(C*)| = |/Zn(C*)| — 1. Indeed, 
if Un+i = c\ then re = for some m < Li. So ^+i(C*) = Ai^^(C*) U {A(„}, and so 

re G /i^i^_|_i(C*). It follows that re G /ifc(C*) for every k with -t- 1 < A: < re -t- 1, as required. 

Now it is not hard to see that |AZn(C*)| = Cj(re) and Tloo, (re,0) |= do*(Q;„_|_i), for alH < A" 
and n < UJ. Using this and (fTT)l . it is easy to check that 971oo, (w, 0) [= grid A □ 


Now Theorem [2] follows from Prop. El Lemmas 12.31 and 12.41 


Note that it is easy to generalise the proof to obtain undecidability of T x*^ L (where T is 
the unimodal logic of all reflexive frames), by using a version of the ‘tick-’ or ‘chessboard’-trick 
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(see e.g. [39l [32l |T0] for more details): Take a fresh propositional variable tick, and define a 
new ‘horizontal’ modal operator by setting, for all formulas 0, 

:= (tick —>■ □/j(-itick —)• </>)) A (-itick ^ □/j(tick —)• (/>)). (18) 

Then replace each occurrence of D/i in the formula grid A ipM with B/^, and add the conjunct 

□/i((tick o D^tick) A (-itick e-)- D^-itick)). (19) 

It is not hard to check that the resulting formula is T x*^ L-satisfiable iff M has an infinite 
reliable run. 

Next, recall A:-fans from ([5]), and the frames S^k from (|13p . 

Theorem 3. Let and be any classes of frames such that 

• either Ch or contains only finite frames, 

• either Sjui € Ch, or fi)k € Ch for every k < uj, 

• either C^ contains an oj-fan, or C^ contains a k-fan for every k < to. 

Then Logic_of(C/i x‘^C„) is not recursively enumerable. 

Proof. We sketch how to modify the proof of Theorem [2] to obtain a reduction of the ‘CM 
reachability’ problem to Ch C.„-satisfiability. To begin with, observe that if we add the 
conjunct 

nhn+{p\y5^nf,{pA^d)) (20) 

to the formula grid defined in m-m, then the grid-points Xn generated in Claim 12.11 are 
all different. Now we introduce a fresh propositional variable end, and let grid-^” be the 
conjunction of ([6]), (1201) and the following ‘finitary’ version of ([7|): 

□,,0„(end V(0/,5An,,5)). (21) 

Given any counter machine M and a state qe^„, let be obtained from pM by replacing 
(fT^ with 

V S,. 

It is not hard to see that grid-^” A p^ A □/i(^^end \s Ch C^-satisfiable iff there is a 

reliable run of M reaching ^fj^. □ 

Note that it is also possible to give another proof of Theorem [2] by doing everything 

^backwards\ The conjunction of the following formulas generates a grid backwards in K x*^ L- 
frames, and is used in [22] to show that these logics lack the finite model property w.r.t. any 
(not necessarily product) frames: 

0^0;,(5 A □/.T), 

^ Oh{^^ A Ohd A DhS)), 

a^Ov6. 
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Then the conjunction of the following formulas emulates counter machine runs, again by going 
backwards along the generated grid: 


where 


for i < N. 


(VAn+(-C°A-C*))), 

D/i /\ (<>hSq^ y (Sg/ A bw_do°(Q;) A bw_do*(a))^, 

qeQ-H {a,q'}elq 

Oh V Sg, 

q&Q-H 


bw_do°(a) 


bw_do*(a) 


bw_fix° 

bwjnc° 

bw_dec° 

bwjix* 

bwJnc* 

bw_dec* 


bwJnc° A yy bw_fix°. 

if a = c'l'^, 

i^j<N 


bw_dec° A bw_fix°, 

if a = cf~, 

i^j<N 


ot^q/\ l\ bw_fix°. 

if a = c • , 

ijtj<N 


bwJnc* A yy bwJix*, 

if a = cf^ 



bw_dec* A ^ bwJix*, 

if a = cj 

i^j<N 


A y\ bwjix*, 

.f 77 

if a = c ■ ■, 


i^j<N 


□+(C° ^ 

°+(c-^(□hqv,5)), 

□qc° ^ □/.q) A oq-q A □/.q), 

a+{nf,c: ^ q), 

otiohc: ^ q) A ^+(q A D/^-q), 

o+{n^q 5)), 


6 Undecidable ^-products with a ‘linear’ component 

Theorem 4. Let be any Kripke complete logic such that contains K4.3 and {uj, <) is 
a frame for L^. Let L^ he any Kripke complete logic having an oj-fan among its frames. Then 
Lfi Ly is undecidable. 

Corollary 3. K4.3 S5 and K4.3 K are both undecidable. 

We prove Theorem H] by reducing the ‘CM non-termination’ problem to Lh x^ L^-satis- 
fiability. Let lUt be a model based on the d-product of a frame = {Wh-,Rh) for L^ (so Rh 
is transitive and weakly connectecil) , and some frame = {Wy^Ry) for Ly. First, we again 
generate an a; x w-grid in 931. Let 

lingrid := 5 Aa+<>y{<>^5 AOf^nf^^d). 

A relation R is called weakly connected if Vx, y, z (xRy A xRz [y = zV yRz V zRyf). 
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Claim 4.1. (grid generation) 

If 1= lingrid then there exist points {xn G Wh n Wy : n < uj) such that, for all 

n < io, 

(i) xq = ry, and if n > 0 then xoRyXn, 

(ii) ifn>0 then Tl, {xn-i,Xn) \= Ohd A 

(iii) if n > 0 then, for every z, Xn-iRhZ implies that z = Xn or XnRhZ, 

(iv) xq = rh and XmRhXn for all m < n. 

Proof. By induction on n. Let xq := r^. As 91t, |= 5, we have r^ = ry. Now 

suppose inductively that we have {xk : k < n) satisfying (i)-(iv) for some 0 < n < cj. Then 
there is Xn G Wy such that xoRyXn and Tl, {xn-i,Xn) \= A n/jD/j-Kj. Therefore, Xn € W^, 
Xn-iRhXn, and for every z, Xn-iRhZ implies that z = XnOr XnRhZ, by the weak connectedness 
of Rh- So by the IH and the transitivity of Rh, we have XmRhXn for all m < n. □ 

Next, given any counter machine M, we will again force both an infinite lossy and an 
infinite insertion-error r-run, for the same sequence r of instructions. As Rh is transitive, we 
do not have a general ‘horizontal next-time’ operator in our grid, like we had in ([5]). However, 
because of Claim ICT iiii and (iv), we still can have the following: For any formula and any 
W G Wy, 

if is such that Tl, {xn+i,w) \= ^ then 

971, {xn,w) \= Ohtp iff 971, {xn+i,w) \= fj, for all n < w. (22) 

In order to utilise this, for each counter i < of M, we introduce two pairs of propositional 
variables: ln°, Out° for emulating lossy behaviour, and In*, Out* for emulating insertion-error 
behaviour. The following formula ensures that the condition in (j22p hold for each of these 
variables, at all the relevant points in 971: 

iM ■= A ^ °hK) A (Out° ^ □/.Outn 

i<N 

A (In* —>• D/jIn*) A (Out* —)• D/iOut*)). 

At each moment n of time, the actual content of counter c* during the lossy run will be 
represented by the set of points 

A°(n) := {rc € Wy : xoRyW and 971, {xn,w) \= ln° A -lOut®}, 

and during the insertion-error run by the set of points 

A*(n) := {w € Wy : x^RyW and 971, {xn,w) \= In* A -lOut*}. 

For each i < N, the following formulas force the possible changes in the counters during the 
lossy and insertion-error runs, respectively: 

lin_fix° := □+(n/.ln° ^ ln°), 
linJnc- := □ ^ (ln° V 5)), 

lin_dec° := □+(nhln° ^ ln°) A 0+(ln° A ^Out° A nfeOut”), 
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and 


linjix* := □^(□/jOut* —^ Out*), 

linjnc* := □+(n;,Out* ^ Out*) A 0+(^ln* A ^Out* A nfeln*), 
lin_dec* := □))‘(n/iOut* ^ (Out* V 5)). 


Claim 4.2. (lossy and insertion-error counting) 

Suppose that {rh,rv) \= lingrid A ^m- Then for all n < uj, i < N: 

(i) If Tl, {xn,xo) \= linJix? then A°(n-|-1) C A°(n). 

(ii) If Tl, {xn, xq) \= \\nJ\nc° then A°{n + 1) ^ A°{n) U {xn}- 

(iii) IfTl,{xn,xo) \= lin_dec° then A°(n-|- 1)C A°(n) — {z} for some z G A°(n). 

(iv) If VJl, {xn,xo) \= linJix* then A*(n-|-1) A A*(n). 

(v) If Tl, {xn,xo) ^ linJnc* then there is z such that xoRfz, z ^ A*(n), and A*(n + 1) A 
A*(n)U{z}. 

(vi) IfTt, {xn,xo) \= lin.dec* then A*(n + 1) A A*(n) - {xn}- 

Proof. We show items (iii) and (vi). The proofs of the other items are similar and left to the 
reader. 

(iii): By lin_dec°, there is z such that xoRfz and 


Tl, {xn,z) \= ln° A -'Out° A □/iOut°. 


So z G Also, by Claim ITTT ivl 


9Ji, {xn+i,z) \= Out°. 


(23) 


Now suppose w G A°(n + 1). Then xoRfw and Tl, {xn+i,w) ^ ln° A -lOut”. Then 
Tl,{xn,w) \= “'Out? by and Claim ICT ivl. and Tl,{xn,w) ^ by and ([22]). 

So we have 9Jt, {xn,w) \= ln° by lin_dec°, and so tu G A°(n). Finally, w ^ z hy (f23]l . 

(vi); Suppose that w G A*(n) — {x„}. Then xoRfw and {xn,w) \= In* A “'Out* A ^5. 
Then 9Jt, {xn+i,w) \= In* by and Claim ICT ivl . and {xn,w) |= “■□/jOut* by lin_dec*. 
Therefore, Tl, {xn+i,w) \= “'Out* by (^m and (l2^ . and so we have ru G A*(n + 1). □ 

For each a G OpQ, we define 


lin_inc° A A ''"-K’ 


if a = 


i^j<N 


lin_do°(a):= lin-dec° A /\ lin_fix°. 


if a = c, 


i^j<N 


□+(njn° ^ □,,Out°) A /\ lin_fix°. 



i^j<N 


and 


linjnc* A 

i^j<N 



lin_do*(a):= 'in-dec* A /\ linjix*, 


if a = 


i^j<N 


□+(ln* ^ Out*) A /\ linJix*, 



i^j<N 
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For each state q G Q, we introduce a fresh propositional variable Sg, and define the formula 
Sq as in Q. Let V’M be the conjunction of and the following formulas: 


A □^(-ln° A ^Out- A ^In* A -Out*), 

(24) 

yy j^O+Sg — 7> \J ^lin_do°(a) A lin_do*(a) A 


qeQ-H (a,q')elq 


n+{Oh6 -a 0^(6 ^Sg,))^ 

, (25) 

a+{6^ V S,)- 

(26) 


qeQ-H 


Lemma 4.3. (lossy and insertion-error run-emnlation) 

Suppose that Tl,{rh,r^) ^ lingrid A iI^m- Let qo := q\n\, and for all i < N, n < oj, let 
c°(n) := |A°(n)| and 


c'i{n) 


c*{n — 1) + 1, i/A*(n) is infinite, 
|A*(n)|, otherwise. 


Then there exists an infinite sequence r = {{an,qn) : 0 < n < w) of instructions such that 

• {{.n, c°{n)) : n < uj) is a lossy r-run of M, and 

• ((.n, c*{n)) \ n < uj'^ is an insertion-error r-run of M. 

Proof. We define {{an, qn) : 0 < n < lu) by induction on n such that for all 0 < n < w 

• qn G Q H and 571, {xn,Xn} |= 

• {qn-i,c°{n-l))-^ffl^y{qn,c°{n)) and {qn-i,c*{n - 1))-^ll^{qn,c*{n)). 

As c°(0) = c*(0) = 0 by (IMl) . the lemma will follow. 

To this end, take some n with 0 < n < uj. Then we have qn-i G Q—H and 971, (x^-i, x„_i) |= 

Sg„_i, by ([Ml) and ([M|) if n = 1, and by the IH if n > 1. So by Claim l4.1lf iL we have 

971, (x„_i,xo) 1= ^ySq^_j^. Thus by Claim [TIT ivi and (f25]l . there is {an,qn) € such that 
971, {xn-i,Xo) \= lin_do°(Q;„) A lin_do*(Q;n,) and 

971,(x„_i,xo) ^□+(0;,hAn,,n/,-5^n/,(5^Sg/)). (27) 

Now it is easy to check that {qn-i,c°{n — 1)) -^fflsyiqn, c°(n)) holds, using Claim ITM il-liiil . 
In order to show that {qn-i, c *(n — 1)) -^fffyy{qn, c *(n)), we need to use Claim ITM ivl-lvii and 
the following observation. As for each i < N either A*(n — 1) is infinite or c*(n — 1) = |A*(n — 
1)1, if c*(n—1) 7 ^ 0 then A*(n—1) 7 ^ 0 ^ and so 7 ^ follows by 971, (x„_i, xq) \= lin_do*(an). 
Finally, we have 971, {xn,Xn) \= Sg^ by (1271) and Claim [lT])ii),(iv), and so qn G Q — H hy 
Claim liTl il. (ivl and ([26]) . □ 

Lemma 4.4. (soundness) 

If M has an infinite reliable run, then lingrid A is satisfiable in a model over {ui, <) 5 

for some countably infinite one-step rooted frame 5- 
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Proof. We may assume that ^ = {uj,S) and {( 0 , n) : 0 < n < cu} C 5. Suppose that 
(^{qn,c{n)) : n < w) is a reliable run of M, for some sequence r = (^{an,qn) : 0 < n < w) of 
instructions. We define a model 


9100 = ((w,<) 

as follows. For each (7 G Q, we let 


i/(Sq) := {(n,n) :n<u], qn = q}. 

Further, for alH < A^, n < to, we will dehne inductively the sets t'„(ln°), r'„(Out°), r'„(ln*), 
and t'„(Out*), and then put 

i/(P) := {{n,m) : m G r'n(P)}, 


for P G {ln°, Out°, In*, Out*}. To begin with, we let 1 / 0(1 ri°) = J/o(Out°) = i'o{\nl) = i/o(Out*) := 
0 , and 


l^n+liK) 


z/„+i( 0 ut°) 


z/„+i( 0 ut*) 


r'n(ln°) U {n}, ifQ;n+i=c++, 
r'ri(ln°), otherwise, 

r'n(0ut°) U {min(z/„(ln°)-r'„(Out°))}, if a^+i = c~~, 
r'n(0ut°), otherwise, 

r'n(0ut*) U {nj, if a^+i = c~~, 
r'„,(0ut*), otherwise. 


Next, recall the notation introduced in (fT^ ~ (fT7|) . We let 

i/n(ln*) U {A(„}, il 


z/„+i(ln*) := < 


= 

n = Cm, 


m < Li, 

= 

^ Cm) 


Li < m < Ki, 

r'„(ln*), otherwise. 


We claim that if an+i = then n G i/n(C*) = z/n+i(C*), and so 

|r'n+i(ln*) - i/„+i( 0 ut*)| = |r'n(ln*) - r'n( 0 ut*)| - 1. 

Indeed, if an+i = c\ then n = for some m < Li. So z/^^_|_i(ln*) = i/^i^(ln*) U {A^}, and 
so n G z/^i^^;^(ln*). It follows that n G z/fc(ln*) for every k with + 1 < k. As A^ > we 
have n G as required. 

Now it is not hard to check that 


|r'n(ln°) - i/„(Out°)| = |r'n(ln*) - r'n(Out*)| = Ci{n) 
and Ttoo, {n,0) \= lin_do°(a„+i) A lin_do*(Q!n+i), for all i < and n < uj, and so fTooj (0,0) |= 

lingrid A V’M- D 

Now Theorem m follows from Prop.[3l Lemmas 14.81 and 14.41 

In some cases, we can have stronger lower bounds than in Theorem 01 We call a frame 
(VF, R) modally discrete if it satisfies the following aspect of discreteness: there are no 
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points xq, xi,..., Xn, • • •, Xoo in W such that xqRxiRx 2 R ■ ■ ■ RxnR ■ ■ ■ Rxoo, Xn 7 ^ Xn+i and 
Xoo~'Rxn, for all n < oj. We denote by DisK4.3 the logic of all modally discrete linear 
orders. Several well-known ‘linear’ modal logics are extensions of DisK4.3, for example, 
Logic_of (w, <), Logic_of(a;, <), GL.3 (the unimodal logic of all NoetheriarH linear orders), 
and Grz.3 (the unimodal logic of all Noetherian reflexive linear orders). Unlike ‘real’ dis¬ 
creteness, modal discreteness can be captured by modal formulas, and each of the logics above 
is finitely axiomatisable [MIE]. 

Theorem 5. Let he any Kripke complete logic such that contains DisK4.3 and {oj, <) 
is a frame for L^. Let L^ he any Kripke complete logic having an oj-fan among its frames. 
Then both L^ and L^ xf^L„ are I\\-hard. 

Proof. We sketch how to modify the proof of Theorem |4] to obtain a reduction of the ‘CM 
recurrence’ problem to L/j x^L„-satisfiability. Observe that by Claim l4rTT ii).(iv). the generated 
grid-points Xn are such that Xn ^ Xn+i for all n < oj. Therefore, if 571 is a model based on a 
J-product frame with a modally discrete ‘horizontal’ component and 

571, {rh, ry) ^ lingrid A V’M A A SgJ 

for some state qr , then by Claim I4.ir iiil ,(iv), for every n < oj there is k such that n < k < oj 
and 571, (xfc,Xfc) 1= □ 

However, the formula lingrid is clearly not satisfiable when L^ has only reflexive and/or 
dense frames (like S4.3, the unimodal logic of all reflexive linear orders, or the unimodal 
logic Logic_of (Q, <) over the rationals). It is not hard to see that a ‘linear’ version of the 
‘tick-trick’ in (I18p - (jl9p can be used to generalise the proof of Theorem 0] for these cases. 
Further, as by Claim 0T] the formula lingrid forces an infinite ascending chain of points, it is 
not satisfiable when L^ has only Noetherian frames (like GL.3 or Grz.3). Similarly to the 
K -case in Section [5l it is also possible to generate an infinite grid and then emulate counter 
machine runs by going backwards in linear frames, and so to extend Theorem0]to Noetherian 
cases. The interested reader should consult where all these issues are addressed in detail. 

7 Decidable ^-products 

The following theorem shows that the unbounded width of the second-component frames is 
essential in obtaining the undecidability result of Theorem [2j 

Theorem 6. L x*^ Alt(n) is decidable in coNExpTime, whenever L is K. or Alt(m), for 
0 < n,m < OJ. 

Proof. We prove the theorem for K x-^ Alt (n). The other cases are similar and left to the 
reader. We show (by selective filtration) that if some formula does not belong to K x^Alt (n), 
then there exists a (5-product frame for K x'5 Alt (n) whose size is exponential in cf where cf 
fails. It will also be clear that the presence or absence of the diagonal is irrelevant in our 
argument. 

To begin with, we let sub{(f)) denote the set of all subformulas of (j). For any if G sub{4>), 
we denote by hd{'ijj) the maximal number of nested ‘horizontal’ modal operators {Oh and 

^{W, R) is Noetherian if it contains no infinite ascending chains XqRxiRx 2 R ... where Xi 2:^+1 for i < lo. 
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□/i) in tp. Similarly, vd^p;) denotes the ‘vertical’ nesting depth of tp. Now suppose that 
(p m some model Tl that is based on the (5-product of = (hfh, Rh) and some 
frame = {Wy,Ry) for Alt(n). (Note that with 6 in our language it is possible to force 
cycles in the component frames of a (5-product, so we cannot assume that and 5^^ are trees.) 
For every k < vd{(p), we define 

Uy ■= {y G Wy : there is a /c-long i?^-path from ry to y}. 

The Uy are not necessarily disjoint sets for different k, but we always have 

\Uy \ <l + n + ri^ + -- - + n^<l + k- n^. (28) 

Then we define ^y := {Wp, R'y) by taking 

WP:= U R'y:=Ryn(WPxWP). 

k<vd((^) 

Next, for every m < hd{(p), we define inductively C/™ and 5™ as follows. We let := {r^} 
and 5° := 0. Now suppose inductively that we have defined UJP' and 5™ for some m < hd{(p). 
For all X € C/™, y € Wp, and O^ip € sub{(p) with fUl, {x,y) \= O^ip, choose some Zx^y^',p from 
Wh such that xR^z^^y^^ and fUl, {zx^y^-ip,y) \= pJ- Then define 

:= {Zx,y,i. -.xeujp^, ye WP,OhPj G sub{(P), 971, {x,y) ^ 
gm+i {(^x,Zx,y^^|,) : X e upp, y G WP.OhpJ G sub{(p), Tl,{x,y) \= Ohip}- 

Again, the UJP are not necessarily disjoint sets for different m, but by (j28l) we always have 
that 

|C/ri < {vd{(p) ■ • \sub{cP)\)"'. (29) 

Then we define J/j := (kF)(, R^) by taking 

<■= U t'r. U sr 

m<hd{(p) m<hd{(j)) 

Clearly, by (f28]l and (l2^ the size of is exponential in the size of cp. Let 97t' be the 

restriction of 971 to 5^)^ x • Now a straightforward induction on k, m and the structure of 
formulas shows that for all k < vd{<p), m < hd{(p), p) G sub{(p), 

^,{x,y)\=P^ iff ^',{x,y) \= P>, 

whenever x G y g , hd{pj) < m, and vd{p!) < k. It follows that 971', {r^, Xy) ^ 

(p, as required. □ 

In certain cases the above proof gives polynomial upper bounds on the size of the falsifying 
(5-product model, so we have: 

Theorem 7. The validity problems of both S5 Alt(l) and Alt(l) Alt(I) are coNP- 
complete. 

Note that all the above results hold with Alt(n) being replaced by its senaill version 
DAlt (n). One should simply make the ‘final’ points in the filtrated component frames reflex¬ 
ive. 

frame (IF, R) is called serial, if for every x in IF there is y with xRy. 


23 



8 Open problems 


We have shown that in many cases adding a diagonal to product logics results in a dramatic 
increase in their computational complexity (Sections [S] and ED, while in other cases upper 
bounds similar to diagonal-free product logics can be obtained (Section [7|). Here are some 
related open problems: 

1. Theorems 0] and [5] do not apply when the first component logic has transitive but not 
necessarily weakly connected (linear) frames. In particular, while K4 x S5 is decidable 
in coN2ExpTime [8j, it is not known whether K4 S5 remains decidable. Note that 
it is not clear either whether we could somehow use Theorem [2] here, that is, whether 
K x”^ S5 could be reduced to K4 x'^ S5. Note that the reduction of m from K X L 
to K4 X L uses that K x L is determined by product frames having intransitive trees 
as first components, and this is no longer true for K x*^ L. As is shown in Lemma 12.41 
and Claim [TTI the formula grid defined in ©-([Tl) is satisfiable in a (5-product frame for 
K L, but forces a ‘horizontal’ non-tree structure. 

2. By the above, K x^K is properly contained in 

Logic_of(‘Intransitive trees’ x^ ‘Intransitive trees’), 

and Theorem [2] does not imply the undecidability of the latter. Is this logic decidable? 
Note that it is not clear either whether the selective filtration proof of Theorem [6] could 
be used here, as both component frames could be of arbitrary width. However, it might 
be possible to generalise one of the several proofs showing the decidability of K x K 

[SIE!. 

3. It can be proved using 2D type-structures called quasimodels that the diagonal-free 
product logic K x Alt(l) is decidable in ExpTime [3 Thm.6.6]. Is K x'^ Alt(l) also 
decidable in ExpTime? 

4. While (5-product logics are determined by (5-product frames by definition, there exist 
other (non-product, ‘abstract’) (5-frames for these logics. The finite frame problem of 
a logic L asks: “Given a finite frame, is it a frame for L?” If a logic L is finitely 
axiomatisable, then its finite frame problem is of course decidable: one just has to 
check whether the finitely many axioms hold in the finite frame in question. However, 
as is shown in m, many (5-product logics (K x*^ K and K x'^ K4 among them) are not 
finitely axiomatisable. So the decidability of the finite frame problem is open for these 
logics. Note that if every finite frame for, say, K x'5 K were the p-morphic image of a 
finite (5-product frame, then we could enumerate finite frames for K x'^K. As K x'^K 
is recursively enumerable by Theorem [3 we can always enumerate those finite (5-frames 
that are not frames for K x-^ K. So this would provide us with a decision algorithm for 
the finite frame problem of K x^ K. However, consider the (5-frame ^ = {W, Rh, Ry, D), 
where 

W = {x,y,z}, D = {z}, 

Rh = {(x,x), (y,y), {z,z), {y,z), {z,x), {y,x)}, 

Ry = {(x,x), {y,y), {z,z), {x,z), {z,y), {x,y)}. 

Then it is easy to see that 5^ is a p-morphic image of (w, <) x*^ (w <), but 5^ is not a 
p-morphic image of any finite (5-product frame. 
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